{"id":29841,"date":"2019-10-22T19:24:00","date_gmt":"2019-10-22T19:24:00","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/cisco-issues-critical-security-warning-for-ios-xe-rest-api-container\/"},"modified":"2019-10-22T19:24:00","modified_gmt":"2019-10-22T19:24:00","slug":"cisco-issues-critical-security-warning-for-ios-xe-rest-api-container","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/cisco-issues-critical-security-warning-for-ios-xe-rest-api-container\/","title":{"rendered":"Cisco issues critical security warning for IOS XE REST API container"},"content":{"rendered":"
<\/div>\n

Cisco this week said it issued a software update to address a vulnerability in its Cisco REST API virtual service container for Cisco IOS XE<\/a> software that scored a critical 10 out of 10 on the Common Vulnerability Scoring System (CVSS) system.<\/p>\n

With the vulnerability an attacker could submit malicious HTTP requests to the targeted device and if successful, obtain the token-id<\/em> of an authenticated user. This token-id<\/em> could be used to bypass authentication and execute privileged actions through the interface of the REST API virtual service container on the affected Cisco IOS XE device, the company said.<\/p>\n